How to Password Protect a Word Document

Whether you’re sending a contract, sharing financial records, or just keeping personal notes private, knowing how to password protect a Word document is a simple way to add a real layer of security to a file that would otherwise be readable by anyone who opens it. This guide walks through exactly how to do it on both Windows and Mac, what actually happens when you encrypt a document this way, and how to choose a password that’s actually going to hold up.

How to Password Protect a Word Document on Windows

Microsoft Word has built-in encryption, so you don’t need any third-party software to password protect a Word document. Here’s the full process:

1. Open the Word document you want to protect.
2. Click File in the top-left corner.
3. Select Info from the sidebar menu.
4. Click Protect Document, then choose Encrypt with Password.
5. Type your password into the box that appears, then click OK.
6. Re-enter the same password to confirm it, then click OK again.
7. Save the document. The password requirement takes effect the next time the file is opened.

How to Password Protect a Word Document on Mac

The process to password protect a Word document on Mac is similar but lives in a different menu:

1. Open the document in Word for Mac.
2. Click Review in the top ribbon.
3. Select Protect Document.
4. Check the box next to “Password to open.”
5. Enter your password, then click OK.
6. Save the file to apply the protection.

What Actually Happens When You Encrypt a Word Document

When you use Word’s Encrypt with Password feature, the entire file is encrypted, not just hidden behind a login screen. This is an important distinction. A basic login screen can sometimes be bypassed by extracting the raw file contents, but true encryption scrambles the data itself, making it unreadable without the correct password. This is the same category of protection used by password managers and secure messaging apps, applied directly to your document file.

Password Protecting vs. Restricting Editing

Word actually offers two different kinds of protection, and it’s worth knowing which one you need:

• Encrypt with Password — prevents the file from being opened at all without the password. This is what most people mean by “password protect a Word document.”
• Restrict Editing — allows anyone to open and read the document, but limits what they can change, such as blocking formatting edits or requiring all changes to go through Track Changes.

If your goal is to keep the contents private from anyone without the password, use Encrypt with Password. If you just want to prevent unwanted edits to a document others can already see, Restrict Editing is the better fit.

Choosing a Strong Password for Your Document

Password protecting a Word document is only as effective as the password itself. A short or predictable password can undermine the whole point of encrypting the file in the first place. When choosing a password for a sensitive document, follow the same rules you’d use for any important account:

• Use at least 12 to 16 characters. Longer passwords are dramatically harder to crack than short, complex-looking ones.
• Avoid anything guessable like the document’s title, your name, or a common word.
• Mix character types — uppercase, lowercase, numbers, and symbols — for maximum strength.
• Store it somewhere safe. Since Word offers no password recovery, write it down in a password manager rather than relying on memory alone.

What If You Forget the Password?

There’s no official way to recover a forgotten password from an encrypted Word document, and Microsoft cannot unlock it for you either. This is by design: the same encryption that protects your document from unauthorized access would be pointless if there were an easy way around it. This is exactly why storing your password securely, rather than trying to remember it, matters so much when you password protect a Word document.

Generate a Strong Password Now →

Frequently Asked Questions

Strong Password Examples

Looking for strong password examples to understand what real security actually looks like? Below you’ll find real strong password examples, weak password examples for comparison, and a breakdown of exactly what separates the two. By the end, you’ll know how to build your own strong passwords instead of copying one from a list — which is important, because any password example published online should never be used as your actual password.

What Makes a Password Strong?

Before looking at strong password examples, it helps to understand what “strong” actually means. A strong password has three core properties: length, randomness, and character variety. Length is the single biggest factor — every additional character multiplies the number of possible combinations an attacker would need to try. Randomness means the password doesn’t follow a pattern a human (or a piece of cracking software) could predict. Character variety means the password draws from multiple character sets: uppercase letters, lowercase letters, numbers, and symbols.

A password that hits all three — long, random, and varied — can take longer to crack than the current age of the universe, even with modern hardware. A password missing even one of these properties can fall in minutes.

Strong Password Examples

Here are a few strong password examples that demonstrate what solid randomness and length look like in practice:

Notice what these strong password examples have in common: no dictionary words, no names, no visible pattern, and a mix of all four character types. Each one is 16 characters long, which is the current baseline recommendation for important accounts.

Weak Password Examples (What to Avoid)

To understand strong password examples, it helps to see the opposite. Here are common weak password examples that still show up in breach data every year:

Every weak password example above shares the same flaw: it’s built from something memorable to a human, which makes it predictable to a machine. Attackers don’t need to guess randomly — they run lists of exactly these kinds of patterns first, because they work often enough to be worth trying.

Strong vs. Weak: Side-by-Side Comparison

Placing a strong password example next to a weak one makes the difference obvious:

The weak version is 9 characters, based on a dictionary word, and follows the extremely common “capitalize and add a number” pattern. The strong version is 16 characters of true randomness with no readable structure at all. Both might feel similarly “complex” at a glance, but the strong password example is exponentially harder to crack.

How to Create Your Own Strong Password

Rather than reusing a strong password example from any website, the safest approach is generating a unique one. Here’s how to do it properly:

1. Aim for at least 16 characters. Length matters more than any other single factor.
2. Include all four character types — uppercase, lowercase, numbers, and symbols — if the site or app allows it.
3. Avoid anything personal. No names, birthdays, pet names, or words tied to your life.
4. Never reuse a password across multiple accounts, even a strong one.
5. Use a password generator so the result is truly random, not just something that looks random.

Why You Shouldn’t Reuse Published Password Examples

It’s worth repeating: every strong password example on this page — or any page like it — should be treated as public information, not a real password. Security researchers and attackers both scrape published password lists, meaning example passwords can end up added to cracking dictionaries. The value of a strong password example is in showing you the pattern of strong password creation, not in giving you something to copy and paste into a login form.

Need a strong password for a specific file rather than an account? See our guide on how to password protect a Word document for a step-by-step walkthrough.

Generate Your Own Strong Password →

Frequently Asked Questions